An open discussion list for topics related to the eduGAIN interfederation service.

[Niels van Dijk <niels.vandijk AT surfnet.nl>]

Hi all,

I am wondering what to do with an eduGAIN SP that has no attribute
requirements in the metadata.

eduGAIN policy states:
(http://www.geant.net/service/eduGAIN/resources/Documents/eduGAIN_metadata_profile_v3.doc)

"NOTE on <md:RequestedAttribute>: Whenever a Service Provider needs
attributes it should list them as <md:RequestedAttribute> in the
<md:AttributeConsumingService> of its <md:SPSSODescriptor> element to
increase the chance that Identity Providers really release them."

Based on the above I assume that I can connect to this SP not releasing
any attributes. However, the note is a bit ambiguous:
- It does not state "MUST  list them"
- It spells "should" and not "SHOULD" as defined per RFC2119

What is expected behaviour from the IdP?

thanks!
Niels